2013
CZ.NIC’s secure information management confirmed by certification
The CZ.NIC Association, the administrator of the Czech national domain, was awarded the internationally recognised information security management sy…
Attacks Targeting Unsupported Java 6 Are On The Rise
Zero-day vulnerabilities are less of a problem than the old-ones since many people use the older, vulnerable versions of the software. In february 20…
Java SE 7 Now Lets Administrators Control What Versions of Java Can Run Where
Oracle on Wednesday announced the availability of the Oracle Java Development Kit (JDK) 7 Update 40 (JDK 7u40), a release that gives system administr…
Intelligent Routers Protect Users Against Internet Attacks
This year, CZ.NIC expects to manufacture and deploy thousands of Turris routers. They will be used as testing devices, available to anyone interested…
Group-IB has issued a report on cyber crime and threats
Group-IB has issued a report on the state and dynamics of today’s market of computer crimes and current cyber threats for the year 2012 and first qua…
CZ.NIC Launches a New Project For Simplifying Domain Administration
The browser also simplifies the administration of user profiles in mojeID.
Prague 11 September 2013 – More effective and easier communication with the…
The Hunt for Memory Malware
Memory forensic is a skill to find out all the artefacts in the memory that is present in the running computer. It is an interesting method to find o…
Forensic Implications of a Person Using Firefox’s Private Browsing
This post is about Firefox’s Private Browsing feature. One of the key statements in the Private Browsing description in the Mozilla product page is: …
5 Signs Of Trouble In Your Network
Companies analyzing the voluminous data produced by information systems should make sure to check user access and configuration changes, among other …
Sykipot Malware Now Targeting Civil Aviation Information
An older malware exploit called Sykipot has recently been reworked to steal data on the civil aviation sector in the United States, TrendLabs researc…
Web Application Security: PHP SuperGlobal Variables Are Vulnerable to Hackers
Hackers are focusing on vulnerabilities in the PHP web application development platform threatening 80% websites in the world, including many big web…
Fake Grand Theft Auto V torrent spreading malware
Cyber Criminals has already released a fake version of GTA 5 contains malware on torrent networks.
Microsoft Set to Issue 14 Security Updates for Patch Tuesday
Microsoft is planning to release 14 security bulletins next week as part of its Patch Tuesday update, including four critical updates for Internet Ex…
Sophisticated Android Trojan Spreads Through Mobile Botnet
Researchers at Kaspersky Lab say a sophisticated piece of Google Android malware is being blasted out via a mobile botnet spamming victims with text …
Why we really need DNSSEC?
Why we really need DNSSEC? That's the title of actual blogpost from Ondřej Surý, R&D Manager, in which he wrote about new way of DNS Cache poisoning …
Traffic Correlation Attacks against Anonymity on Tor
The researchers led by Aaron Johnson of the Naval Research Laboratory published the paper on Traffic Correlation Attacks against Anonymity on Tor.
Silent Circle Launches Secure Text, File Transfer App for Android
Silent Circle's apps and services route encrypted calls, messages and attachments exclusively between Silent Circle users' iOS and Android devices wi…
Counter-measures against Man-in-the-Browser attacks
Though phishing and key-loggers is still widely in use, banks have become aware of these threats and introduced multi-factor authentication including…
The Brno branch of the CZ.NIC Academy offers special courses in modern Internet technology
A total of 15 courses on the DNS system, DNSSEC security technology, BGP routing protocol, the IPv6 Internet protocol and the SIP protocol used in in…
New Member of the CZ.NIC Association
The company Vymáhání a odkup pohledávek s. r. o. is a new member of the CZ.NIC Association as of 1 September 2013. Vymáhání a odkup pohledávek become…
Mobile Trojan Defeats Dual Authentication
A new cross-device mobile Trojan that already has targeted online-banking customers has been linked to the same group that waged the successful High …
Developers Hack Dropbox, Show How to Access to User Data
Developers who were able to bypass Dropbox's security by reverse-engineering Python applications -- the language used by the cloud storage provider -…
Hacking, Surveilling, and Deceiving victims on Smart TV
Smart TVs sold over 80,000,000 units around the world in 2012. This next generation "smart" platform is becoming more and more popular. On the other …
Fake Xerox Scans Deliver Malware
A recent spam campaign abuses the name of Xerox, inviting users to download a scanned file to infect their systems with Trojans. The subject tagline …
Java Vulnerability Exploit Added to Neutrino Attack Kit
Security researchers are recommending Java users upgrade to the latest version due to a new exploit that has made its way into the Neutrino exploit k…
CZ.NIC Academy To Offer an Accredited Data Box Course Beginning in September
Those interested in this and other courses taught at the CZ.NIC training centre can register at www.nic.cz/akademie.
Prague, 26. August 2013 – The tra…
Critical Pinterest Exploit threatens the privacy of millions of users
The security researcher Dan Melamed has found a Critical Pinterest Exploit that compromised the privacy of over 70 Million Users, the flaw allows hac…
How Online Role-Playing Games Infect Your Computer
Massively multiplayer online role-playing games (MMORPGs) such as "World of Warcraft" or "EVE Online" are a lot of fun, but beware: The games can als…
Access EDUROAM at the CZ.NIC Academy
Visitors to the Academy can now access Wi-Fi using a single pair of connection data they obtain as students at universities, other academic instituti…
Short Password Reset Code Vulnerability Allows Hackers To Brute Force Many Websites
The hacker used a Firefox Browser equipped with the Fireforce add-on, a very simple a Firefox extension designed to perform brute force attacks on GE…
Microsoft: Windows XP Usage Means Zero-Day Attacks Forever
Microsoft has a blunt warning for computer users still using Windows XP: Upgrade to a newer operating system now or risk exposure to zero-day attacks…
Microsoft Re-releases Windows Server Security Update
Microsoft has re-issued a patch for a Windows Server vulnerability related to Active Directory Federation Services.
Hackers Targeting Servers Running Apache Struts Applications, Researchers Say
Chinese hackers are using an automated tool to exploit known vulnerabilities in Apache Struts, in order to install backdoors on servers hosting appli…
USB Internet Modems Vulnerability Exposes Millions of PCs
The Indian security expert ‘Rahul Sasi‘ announced to have found a USB Internet modems vulnerability, that could allow an attacker to execute maliciou…
CZ.NIC Statistics Supplement MojeID Data
Statistics from the CZ.NIC association have thus far produced data connected with the status of the .CZ domain, DNSSEC, IPv6 and hosting. Now were ad…
Dell BIOS In Some Latitude Laptops and Precision Mobile Workstations Vulnerable To Buffer Overflow
By convincing a user with root or administrative privileges to execute a malicious BIOS update, an attacker can bypass the signed BIOS enforcement to…
Google Releases Android Patches After Bitcoin Theft
Google has pushed out patches to partners to address a cryptographic vulnerability tied to the theft of bitcoins from Android users.
Hacker Proofing Apache & PHP Configuration
Apache has been truly one of the dominant web servers of the World Wide Web. Now first we will learn about the techniques to how harden our Apache co…
Security Flaw in Philips Lighting System Lets Hackers Keep You in the Dark
A misfortunate implementation of the security token in the Hue intelligent lighting system from Phillips could allow an attacker to control the light…
Unpatch Wednesday: Microsoft Pulls Flawed Exchange Server Patch
Just 24 hours after shipping a critical Exchange Server 2013 patch to cover several remote code execution vulnerabilities, Microsoft has yanked the u…
Microsoft Patch Tuesday to Fix Three Critical Remote Code Execution vulnerabilities
Today the Microsoft Security team will issue eight security updates in total. Three are designated as critical and rest five as Important updates, th…
Simple Hack Threatens Outdated Joomla Sites
If you run a site powered by the Joomla content management system and haven’t yet applied a critical update for this software released less than two …
DNS Impairment Redirects Tthousands of Websites To Malware Sides
On 5 August tree Dutch webhosting companies suffered cyber attacks. Their name servers were altered by attackers that appear to have accessed an acco…
New Banking Trojan Targets Linux Users
Researchers from RSA have uncovered a new banking Trojan designed to steal information from machines running the Linux operating system. Dubbed “Hand…
Firefox Zero-day Exploited Against Tor Anonymity
Security researchers found a malicious script that takes advantage of a Firefox Zero-day to identify some users of the Tor anonymity network.
Hackers Can Steal Windows Phone Passwords Using Wi-Fi Vulnerability
Microsoft has warned that a vulnerability in Windows Phone operating systems could allow hackers to access your login credentials. Cryptographic weak…
CZ.NIC launches new projects
Both projects are based on real requirements and fill the need for services that were previously missing.
Prague, 3 August 2013 – The CZ.NIC Associati…
BREACH Decodes HTTPS Encrypted Data in 30 Seconds
A new hacking technique dubbed BREACH can extract login tokens, session ID numbers and other sensitive information from SSL/TLS encrypted web traffic…
Credit Card Redirection, the Evolution of Phishing
Cyber criminals are varying their attack method compromising legitimate shopping websites instead to deceive them with spoofed emails that lead to sp…
The Ultimate Guide to Secure Your Social Media Account
How would you feel about a complete stranger knowing intimate details about your life? How about your bank details? Well, the intimate details that y…